Security Advisory

CVE-2024-0507

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-01-16 18:51:28
Last updated 2024-10-22 15:50:55
Assigner GitHub_P
State PUBLISHED

Description

An attacker with access to a Management Console user account with the editor role could escalate privileges through a command injection vulnerability in the Management Console. This vulnerability affected all versions of GitHub Enterprise Server and was fixed in versions 3.11.3, 3.10.5, 3.9.8, and 3.8.13 This vulnerability was reported via the GitHub Bug Bounty program.